Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/90695097-5c55-3046-9f0f-a770c6766cc3.roa
File:                     90695097-5c55-3046-9f0f-a770c6766cc3.roa (raw, json)
Hash identifier:          7MjZumfQYgIPY9f8668O0oBJiq4uvEbhIhlBt+D0+QQ=
Subject key identifier:   B9:05:5B:2A:E6:30:C7:24:9D:9E:B3:CA:ED:B9:F8:F2:48:7E:A3:D4
Certificate issuer:       /CN=f8e7a246-465c-42e8-8be1-af167b20b04d
Certificate serial:       010D0C9F4328584CC07C8BD5DD5FBABFFF89D480
Authority key identifier: 47:E2:47:E2:08:C3:82:0A:55:A4:99:5E:E0:10:DE:78:D2:94:F1:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/90695097-5c55-3046-9f0f-a770c6766cc3.roa
Signing time:             Wed 04 Feb 2026 14:00:39 +0000
ROA not before:           Wed 04 Feb 2026 14:00:39 +0000
ROA not after:            Tue 05 May 2026 13:00:39 +0000
asID:                     3257
IP address blocks:        23.234.132.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c0:7c:8b:d5:dd:5f:ba:bf:ff:89:d4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8e7a246-465c-42e8-8be1-af167b20b04d
        Validity
            Not Before: Feb  4 14:00:39 2026 GMT
            Not After : May  5 13:00:39 2026 GMT
        Subject: CN=4aa5d30d-d6a0-4468-8ac2-42c485a01d74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:0c:5c:76:07:97:81:18:8a:76:19:94:f0:c7:
                    7a:4f:c6:18:ca:24:56:0d:19:28:a4:e5:ed:b3:9b:
                    0b:05:38:4c:73:42:ca:82:13:95:c2:34:da:e9:b7:
                    9c:af:d8:79:75:c7:96:aa:03:48:26:87:6f:36:73:
                    b6:88:18:a3:a3:b2:c0:18:5e:4d:1f:de:dc:8d:e1:
                    c9:6a:a7:8c:62:8d:9a:96:20:9d:e7:c9:e0:d2:dc:
                    45:7b:46:8f:74:cd:f7:f1:92:4e:06:60:98:45:1e:
                    d6:0b:ea:fb:b9:c9:91:5a:17:ff:92:97:69:a8:c6:
                    53:3b:26:a4:80:1e:54:30:3d:60:c6:55:ac:b8:b5:
                    f0:45:cd:ce:a7:9f:dd:26:ab:ec:b9:fa:67:b4:cb:
                    5c:c0:a5:6f:c7:40:ee:02:84:7d:9f:86:f0:0b:02:
                    66:58:cc:32:4b:96:3f:ef:ac:ac:d1:99:34:7f:59:
                    69:0b:cd:20:b9:d6:32:e4:91:d5:d0:77:e9:af:29:
                    c2:27:eb:af:97:09:aa:21:f7:a9:2b:2e:78:6f:29:
                    2f:c3:78:d3:72:bc:f6:89:9c:9a:01:c6:a5:64:44:
                    1e:3e:7d:76:ed:c2:3a:fc:e9:d8:66:7f:b6:f0:c9:
                    1e:c8:33:f7:25:5d:61:35:b2:d6:b5:46:34:a2:0d:
                    68:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:05:5B:2A:E6:30:C7:24:9D:9E:B3:CA:ED:B9:F8:F2:48:7E:A3:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/90695097-5c55-3046-9f0f-a770c6766cc3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.crl

            X509v3 Authority Key Identifier:
                keyid:47:E2:47:E2:08:C3:82:0A:55:A4:99:5E:E0:10:DE:78:D2:94:F1:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.234.132.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:5f:7b:7e:e4:a2:f4:b3:f7:cf:60:d5:a1:7b:34:1f:c5:9e:
         3c:e0:cb:bb:aa:2a:fa:c9:f8:bc:e0:f7:09:26:db:43:a5:fa:
         44:a2:5f:30:4e:4e:63:0a:2b:68:b1:c3:3c:a9:da:70:d9:7b:
         07:20:46:47:2d:05:23:68:22:19:a7:89:11:dd:5a:6c:70:d5:
         6f:83:a6:53:47:8a:62:dd:fd:86:5f:f6:2a:2a:16:30:03:16:
         a8:3b:83:b8:d5:bd:85:36:2c:c6:f4:23:34:2b:86:c4:93:29:
         c4:9c:c5:6d:7d:69:26:e9:d8:b8:bb:8a:e0:0f:e3:4d:5c:93:
         a0:ad:ad:1a:91:f1:f8:4f:e9:5e:29:37:62:90:31:d4:17:d7:
         7e:eb:12:fc:9c:e8:8a:42:e3:be:b7:04:5f:af:10:a9:27:0a:
         53:37:51:f1:39:f3:37:bc:57:ca:39:71:cb:88:c0:b7:71:82:
         f3:7d:30:55:d0:8d:d3:c0:ac:fe:de:ac:93:01:9b:6c:ea:7a:
         04:51:22:bf:b3:e8:79:74:f6:25:b7:5c:c0:64:c4:e3:d6:ff:
         7b:1e:71:f3:9d:b9:6a:d7:34:62:e8:8a:6f:5a:d8:b5:e7:4a:
         41:6a:5f:46:67:15:ba:b2:bb:8c:2c:c6:92:51:5d:3d:6c:20:
         9c:ef:b5:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:09:48 2026 by rpki-client